Valerian

**Name of the Vulnerable Software and Affected Versions** baseweb JSite version 1.0 **Description** A vulnerability was found in the file /a/sys/user/save, where the manipulation of the `Name` argument leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For baseweb JSite version 1.0, as a temporary workaround, consider restricting access to the `/a/sys/user/save` endpoint until a patch is available. Avoid using the `Name` argument in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.